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U m =ft 



mi/1331 



1. m& 

2. 

m4-^mftm^&&&m&mi£\kteMDiffie-nelman (DH) 

—31^1^ , IbJ^^-^HB— Rt— fft&W/3fcW Rivest, Shamir and Adelman (RSA) 

&^5tfs&P£— ft Elliptic Curve Cryptography (tfflM^Pi, ECC) ^!3*fo 

S^TSiiLTiEJiSttfflRSAgcECC*^. HJlkift4rAW"t-l.RriEWWA». 
S l *aTKffl«**«iWW-^lt«ll^tt^flr¥^*4fc (TPM) 

@ 2 ^tUT^® 1 ffy TPM ^Mfcls 
S 3 ^*TM@ 1 W TPM W¥^Wf-»J; 

a 4^ai7ffls 2 w tpm mmmnn^^-^^mmmm; 

m 6 **iii*«*ftwtt^*it«tt««»fi*^»itiM9i*«tt*ft 
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tt m ^ Jtl2/13W 



mmm^mmvEWM Diffie-Heiman mm&&mxmftw&u&>mm : &&%k 

#J 300 SiJ 700 ^UM4>?'JA^ 20-25 ^15f, £3fc*riS:# ittSTl^iiE^ ft 
Diffie-Heiman ^^^0fS tt#®5M£#teft*«J«d> *T#&5lt3&— 

tiim&. frMu t»j#hi^> b*e&*^. "aMtfin*" &%%.mfex% 

<£^]Tf ft*^ &£*fi&3c^am^ft:fco 
(«q, ^A, tt#m/««4fr) . »#. i*ft£&?Frt*#0H*# 
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tt m ^ SI3/13W 



tojltttflrttfflto. "M" "aft" 

1^1^2002 ^ 11 R 27 BJ^^^ "System and Method for Establishing Trust 
Without Revealing Identity" ^^^^tt^T^ALftft^]^^^) , 

$tih^^it^W^-W^|WI#m^^iJ^ifm 10/306,336 W^M.^iiEW^ 

j&m&m^%~^mi*MM&®m&®M (F PU b *c F P n) . im F P n, 
^^^^^^^-^^j^w^pi-^m^iiEHjfAw^^^ (DPpri) = m^m 

WDPpri^fitl'fMmmW^ffl^^Fpub^iiEo &-^iIEft^iR^ 

t£tim'&mmmn* dp mmm^K^m^m^m^w^ ^ 

102 (MtfU#) £3£if* 106, ^-^^ 104 (PfijS#) 
So BlRl/SZ^-it^c 106, 104m^if^^#m 108o 

^W^miOSo «P, ^^^BJ^-^«^J. I-f & 102JMJH-^£ 104 

106 ^ (^ff^tb^) ^^^w#^c b-t^ 104 mm^^mm^m 
wtM^mM^m^, mm-^& iQimmm^^ 104 j^Eta-is^m^ no 
^mmit^,m^^^m$M, 0 mn^u&mmmtM. ios &j-w#(*q 
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itt m ^ SI4/13W 



> h^»'J + , 104 feK^{f¥£*l±;fe(TPM)115oTPM 

H5^sm«'J5t^ iioft|jftW*«ia*. £#£SI3M— • t^WiJ*. TPM 115 & 
jg^Ufit^2grtfi<l/>*>T-±#^«Wfl:3S*. TPM 115 Mfigm[R]Ji~T£ 
102 «#IH££H#ffi&0ftSJ^r& tpm MfflWilS^^t 
tpm gR^nY^W^^pr^S!H«J£Wrt#. 

S2^t±i7^WTPM 115 #j3I-¥£ 104 S^m— $iWJ. XH^Mftjil^ 

mm, 104 -asMn^-ai tpm 115 w&h3i3§ 202. -Mt. ^ti^ 202 

£ts§§ 202 nr^^^pi^jg^j!^^^^. vgimm%}»smnn&n 

(FPGA) > ,R#^-|ift«S£ (TTL) J&m> aRSMJMJB&jSfeft (ASIC) . 

*«3. i^U<t> HE1?^o "X" MtfcflJteRTO*^ "Hash(X)" o 

pmi&^7&— TPM 115 tort*B#te#220 4^M^Jl^#^#-7tl 
206 (f. M3ff^ ^^mWteiP^. X^^P^fi^TPM 115 ^hflPfltlH^ 

m 4 ^tBT^fflS 2 W TPM 115 ^iJftfiHt^fll^ 300 0W£ftJ— 
#iJ 0 if||:#U^ 300 &&&& 302 302 £fl£t«« 310.TtJf#l36& 300 

^JS±#^»^7D 304 mm&&i%&&7t 306 o 

ifcfc&t, ±#^*^7u 304 ^ffl«#^ftm^*M^ 310 JMrMfc^M^fc 
£¥###te*.±#fit£ 304 aWffl^^Aba* 310 iMT m^lHJ^MHt^S 
sK^+^JflS.»^#<«*^7n 306 Sffi^M^F^ife^Aba* 3io te&m&ftft 

^mm^^mw^^oms^^ 306 w^^s^pr^sk^^i^k^ 

(ROM) o zfe#tft3§#-7Ti 304 fP#*#^*#.7D 306 302„ 
WEHJ^-^h^Wi^, it#r#U^ 300 aS^lt^a^TfiS^^ 
ftgiS^ 308, E.^^6<]9M^fl&^"^i'Jit#mm^ 300 ffl^te^mt^fB^o 
ifWtilM9t 300 ifeRT^^JS^ 302 jm^SJffl^e*J»«:# 314, iim&^'M 

snpjmitisw (crt) . *&hm^3£ (lcd) HR^¥«a^*^a^#. ffi^fr 

iiflt, ^#»^*&AS#316 («n, ftE^) vSim&m&1£ 302, 
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itt m ^ SI5/13W 



mmma^Th 320 teiffi^J&fel 302= ^n#-7£ 320 ft^0J&@W$Jtf 
£^tfl*n/iiKJK&*. 

mat, itwtiimm 300 Mmwm&^mtaifrmm* mzm^ 
&m.&—^mw*, \\nm>%%t 300 ^w&m&^tt^mm 304 *n/i£ 

308 * # A & 3» 310 mtf W#»J^^ W " " ( mta . 

Diffie-Helman (DH) *^^j±3@. &&i±M* , 

£*M, fifii- iAiiEii^ffl RSA g£ ECC m\it^M^m-R^ 

Xtfl "cookie" o SISt^T- &m&&WtiLmft%T*Mfafc&&fo&o 

£ 2004 R ? S^^^J^^J "An Apparatus and Method for Establishing an 
Authenticated Encrypted Session with a Device Without Exposeing Privacy-Sensitive 
Information" (ffi^^»»^*tttt«^mW1»iaTft^^«#WS^ffifi<lj&P* 
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tt m ^ JI6/13W 



^Tsw^afo^rv*) , &ik&*#mtommmto#m&foto'¥m*ftm 10/???,??? 

^^^7-##^^.^^^^,WJ^UiiE^ Diffie-Helman i±gW RSA 

^ ecc ®®#}&mmM&vEm®®*&&o im^^^.^mx\^m^- 

&m (DPpri) . j&'zmffiMwm&T-mfcT- n* &mm.^mim&* = iiuin 
i«M}iswMm*»ttffli;»tw DPpri m%« 

DPpri jjp^tfj^ "m%ik (keyblob) " ft£fc|ggffa, ^^ia^^^#il?!l^ 

^Ur) ^ 20 ^WM^JM WJ. &^40^>&^^o 

£t 503 iy.S^*litSm^^ 504, T&##J$ft£«i ! '36^&Jg#Tft«- 506 iftftjj^ 

HuW^sii^^^ffiet^ba^gEc &$k&j&& 502 pj^^fijit^^-e^^ 

M^lfti£*o $^£^3^503 PlSM^Jil^fffi. £-^g£«iJ4>, W 
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tt m & mi/im 



tflft RAND 508 ftl^iJ^ 509, 

^^^^Jijtg 512 mTmtt&j&tt&^®mw.mm'j>mttm-mm&&}Tk 

m (DPpri) ^m^^^m^m^mmmMo dp 5^^516 (DP P n^) 
Q&mmmta sha-i m^.^±mBmmmm^^m^ DPpri wmmais. 
xmmnm^n&tomwiftftfom ov> sis, sfi*&raB*#ttBWiifffto& 

tt&m&}*I&%}&ffilfrffi tMtto, (DVD) bS^-S^M) c 

mm&mMm&wmx&Mff^m 504 «f*&jgw«& 506 mmm^^ik 
mmmm&&to&j*mirjmjsim 504 pt^e- m cd 3MA£ij^ait#a^£Hj 
cDROM^ti *3ljswjiKcd ±mm®i&ffl&m 520 ^mmp/fm^m 

&*£&m®m*&ii&m&.&&mmmft&ft 526 s^mtimm^iMT * 

%0*&ifc#£i&liS:# 506 o 

602 *n$iJi£j fe B mi£604o &J^&]fctt#:%ffi 7 ftm^ p°p l^l£lfc&b## 
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606 *P$J»& 608c ^Dlit#m^^^SMjifc^##S9^fil^o ^irut 

m 800o ft-^«#ij + , a#iftliftlff RTttffllWjftSft^JR* 502 j&Mf&mjft. 
fttl 701 &t, &#ftjimW^S^MBtj#— S#^£jaH8HEWj&*$3X!fr (Fpub *a 

Fpri) o Hi— tt^Hr^ffljStWDPpri*^, Mf^ffl DPpri^jaW^PTil 
ftfg 702 &h, ^^iJ^^^ffif^Sl^MiB^^ RSA SMBX* (Gpri, 

Gpub) o ft^-e^ss^, Rr^fflftK^«c^*3R^*^RSA. 

«#W«^4fetl^aL»iram^i±^WWI^. ft— ^Jfifcl*. 

5,000^^-0 vsmm&tt'b* 

Ijjtfe 512 S^it^^i^ 502 ^^^iMfS 7 ftfl 704 HJffl 8 M*I 802 o 
MSfc. ftfl704£h, ^lilM^Pt— #/BS#tfI (RAND) 508o ft-^J&£#l*F, 
RAND ^-fejg^ 128 & 0 ft&*&&jffifcl+. W^^^^Wtto ft— ^Jfifcl 

^*5fc£#JE^£ > Ma&Wf&i»&l{6. ft*! 706 4b, 
f, ^^I^Pi— RAND<i^^^iP^^ SKEY ( SKEY=f(RAND) ) . 
iRjffi^CRnUftSffl^jfcHWWft^Bftl^ (#'J£P> SHA-K MGFK fdgjjP^ 
7£ (DES) > HlDES^) = ft II 708 &t, ft-^MW, 

SKEY3&(jq& (#I£P, i>S#^) , ^/Sttffl^IJi^ CD 522 

±toi3tf&&Waj«&514ttt*iRflF (ID) £i& (&#IDH£JB SKEYjn®(0..0)) , 
ft£££«iJ + , RTttffl^ft* ID iftg^^nTO SKEY *iP*K l &fi. 

g*. fttii7io^b, ^^m^^^mm^m (F P ub) js^m dp 

#*^DPpri. fttl712£h, £.f&J3jm&mE>to&}JT& CMla, ^fflSHA-lsK^ — 
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tfcJ'JJtt*) *t DPpri iaif^Jis^tUr^^DPpri^lIc :£*l714 5b, ^feritabUfc^Jlft 

^^^^^w^^Bfim^M^^^m^miRi* (iv) . 

SKEY ^jq&^^ira&tfj&^ifc 514o £fl 716 5b, M 708 5h£/£#Ji&& ID 

*n*i 714 itttkj&mzbQmMmm 514 cd 522 ±^m^m 

4b££ffl8B«J«801*b3l&. £*g80l5b, ^frRANDttfll«#^fJBtfiafifl 
SltrfflJ^-^RTft^^^ES^^Ig^ 510 802 5b, pJPJI^ SKEY ^ Dppri, 

— o DPpri «f5f W^JM*lB^IWfflJ± SKEY WJP**«Thrfcffi# DPpri gftrt^fg 

tsw skey miw^wmfe, &w&mmmn^wHm&fem%^ skey w 
mwmm^muT^m^^ skey w^^bjc. a^-s^^*, rt^^ 

®#iD^ajff*5iB«j-, m&—&&wim--^m9i9kfflBm&m) . sit, m 
8045b, s#*jjtnf^jai^iam5i5. ^aia^^a^> aw^opub, 
msfi^awaf^^-iB^ Gpub, a^/h, <^^§- idi, m^m^mn 

&1>, <t£&ID2, SJpafWflS^* 2>, ...» o » 806 5b, Tfc^H&MHT'tefllffl 
^.Gpri«*fflTa* f ^m^^miPSiJ^fiiSmo £tg 808 5b, pT^^W 

&M%02 3LJstofcttttm, 810 5b, Pl^RAND^Pm^^WS^ 

m^^^iik±#iiJ$iJ3tm^^^ 503, ^jR^«i3ftJ!tg»i(l]5» RAND fPS 
^^H^#?m#+o -MtftiiETJi-±ft. i*MH»5fc«^3Rft 502 +££*IM 

1^ RAND {to 

S 9 ^^m«*^B^^-^«J^^#flJ^/ £E 5baW^® 900o ^£ 

^Si+lWfciSMHit, MI 902 5b, iW5tt^*»^*«!P**J¥+»ff-*ttffl 
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W RAND f0^^-{t^to #T&#lft RAND ^Pifl^-^fi^j5'5lM^#^^-4 l W^N 
as-H^afi« + . *»5fett#flr&« TPM. £*S 904 *t, felSTO 
ffi4HB Gpub WtS^«#ft«#W*»5fett#« I t J . £H 906 Ah, — RAND 

m.j&*mmm&*, w\^m±^^m±^u^mmm^^^m rand <tw 

tefaiB^o jfc&t, RAND {jStfjPt— 9J*<*#^ift#ft'. 

#->h#&£S£#i*, rand m»s& : &&M®mffltmm, ^Bwrnmrnm 

^-^ifc^, RAND teRT&i&fc-Lfcl*. ^«#fP*JaftSfit^3R^RT 
# igHfrTOteffi*£i&#:t*M§* DPpri ®^ftj3r$£*£$ DPpri , 

W^tS (&#ID. Wn^m, il^^it RAND sSc DPpri ftHt. 

S iooo m nooo ^fLit^m^^^f^^^^^^l^m^W-^o £*I 

1002 Ah, pI^iE^^l^^mit^tfim^, #J.W&T&#ffli£#^g^ 526 
1004 Ah^l££- 506 #J*#S#*i£i&£- 308 ^^e^^TMin^^ifett.^ 

^ 524o ftimw, wij^fi^a-^^^s^ba, titifti^i 1006 Ah*£ 

Mo jrafSf. EiJAh3£tIi008 Ah*&*£<> £*Ii008Ah, &&^31PH£#[r]^ 

miw^MMmf 3 &mmmAft'& cd 522 wms. - K&i\mm%tmLi 

CD, T&^W^IJ^/S^ CD ±te#ft|g^&*£;8@rt s ##«ife (S5t* 
^ttS) o ^^^^ffi^f^^it^iaiD, i^miD ^WJt&^HBGpubftffl 
Jf^509 Wtfe^iJc i£#j&[e]&i?<&, ^fflfS^ffi^<t*ACD±^^^^ifetg 

DP ^m&JRfcMl. 

^nfiJSt, £*I1010Ah, «#«ffl^l«ia»f*^«Afi<I RAND {1 508 * 
£§r£j$*m&#3 SKEY (iJft^ffiT^) ( SKEY=f(RAND) ) . 1012 Ah, 

Tft#*&J5»fcM£JB SKEY #0^ "£^rg" (#l£n, , MQL&Rm—TSt 

#ID^ (^IDHMSKEYjjP^(0..0)) o ^*^HJ^-^^»'J + , S^fi 

#H 1014 Ah, af^tft*S35fflg^ CD _hW*«*te*15J¥ 520 *MmQ^\£ 
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mtevkMmL a^Gpub3FPEK«#iafi<i«#iD (^1012^^) 

->h<i&#iD, Siq^^^±^>^o £4tioi8£b, ^iSL^iE^ia^o 
1120 

&m 1120 ^h, skey ^mmmw^mmm, DP P n 

fPDPpri^^, #tt&«iftte#££#a5fcty?te Cf£»*to*fI#H£JS SKEY 
^®(IV, DPpri, DPpriJSH)) . omMJ^fa* (IV) . MI 1122 £t, 
J5ffii±*t DPpri ffllTt^isJt?m^ll-^ DPpri ^J&frbk^^ DPpri to^H 
ft 0 ftHtUBEkfr, Jtt«M#&g DPpri 

j&&%M&m^Dpm>m&$Lj&?hMmo iiima, §rto iv, 

ffi^if^IV^^gf^^P^^^ife^^^C^itk^^^HM SKEYjjP^(IV2, 
DPpri, DPpri ^H)) . irW^lW^W*^*^* RTftjfeHl^^^^ffi^. 
£*I 1126 Ah, ^^^^ffl^Iff^iS^n^^^^l^±^#^^^t^ 
^rtto#lit* (#I*P, ^PA#*#^^ 308) o ##WDPprima=&££*& 

-H.^^SAbaSara^T DPpri, ^^BW^ffli^DPpric s 12 

^^a^&tiftM«imifa^^o mi 1202 &t, BsujEft-xtti^&pft. 
#sg^jg^^3T *&3Mtr* , T&&m%)mj¥ifafeT&& 506 w a§»#m^# 308 

G&te&T &tomtt*&ikmmi& 524. tm&iStfi, PJ*,firffl lofn n toT&S&afi. 
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1ft m U 3S12/13M 



in*x*^s#^rsip«e<i*«ii4baFt94feflrfli. wiiAhs^jg 1206 Ahm^s. ^+11206 
Ah, ift#^e^tt«fijbg«a«i^%ib«^. 

&m 1208 Ah, fMftAW RAND <i 508 muf^^f^ 

^ SKEY (Sfc&JB ( SKEY=f(RAND) ) . £fl 1210 Ah, ^'flffl^ 

^SKEY^^iP^^ifett,^^, DPpri #J DPpri ^^<t 

te#£&^&tt3Mfc+ (&#pafW««4feHStffl SKEY$^(IV2, DPpri, DPpri *§ 
H» „ nm^fg-#J&4fcft* (IV2) . £*g 1212 Ah, i&^5M*t DPpri Sfirtfc 
^Jis#^^m-^DPpri^^^ftt^*^^DPpriM^'|4o ft] j^tt^ (#1 
ft, ilEE) , W!l«#S>BC^ DPpri #*M«HWW»af^. ^Jfci^ffl-fe. 
^#&^^B^#ifeS*|6t*»^B^^DP^. 3E*I1214Ah, i& 

&$19H£ffl skeyJp^(IV3, DPpri, DPpri «H)) . i2$fM&Jq*to#i&4ba?01 

^WiElil^^^^fflfl^o M 1216 Ah, «fB*&*£/9S;»Mfr«i£in*to 
308) o DPpri Jl^S-^^rttkf*#^E^mit#m^^+o 

s^pffl io w*e 1018 ^mm#tmm^m.TZMM, $p*«# 
^#^^usm^^s * asms o 

^#»*&aiq*tt$&$l*fe&t, t&#rT&35 Gpub «k^j, Gpub 
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« m & m m ne/nm 
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